corpus.blog
41,554 blogs · 5,358,632 posts Claim your blog
Record · corpus.blog/posts/01a0877a-a477-7199-93ce-d000a8c685e9

Overview of Proton Bot, another loader in the wild!

fumik0.com · published 24 May 2019

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at fumik0.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
27
Words captured
2,169

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://www.virustotal.com/
virustotal.com
https://docs.microsoft.com/en-us/windows/desktop/api/libloaderapi/nf-libloaderapi-getmodulefilenamea
docs.microsoft.com
https://msdn.microsoft.com/fr-fr/library/windows/desktop/ms683156.aspx
msdn.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/shellapi/nf-shellapi-shellexecutea
docs.microsoft.com
http://iplogger.org/1i237a&
iplogger.org
https://docs.microsoft.com/en-us/windows/desktop/api/processthreadsapi/nf-processthreadsapi-createprocessa
docs.microsoft.com
https://www.win7dll.info/ktmw32_dll.html
win7dll.info
https://docs.microsoft.com/en-us/windows/desktop/api/fileapi/index
docs.microsoft.com
https://technet.microsoft.com/fr-fr/office/bb968806(v=vs.80
technet.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/ktmw32/nf-ktmw32-createtransaction
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/ktmw32/nf-ktmw32-committransaction
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/ktmw32/nf-ktmw32-rollbacktransaction
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/winbase/nf-winbase-deletefiletransacteda
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/winbase/nf-winbase-copyfiletransacteda
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/winbase/nf-winbase-setfileattributestransacteda
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/winbase/nf-winbase-createdirectorytransacteda
docs.microsoft.com
https://blog.malwarebytes.com/threat-analysis/2018/08/process-doppelganging-meets-process-hollowing_osiris/
blog.malwarebytes.com
https://twitter.com/hasherezade
twitter.com
A predatory tale: Who’s afraid of the thief? Read at the source ↗
securelist.com
https://twitter.com/fumik0_/status/1130931704171061248
twitter.com
https://docs.microsoft.com/en-us/cpp/intrinsics/cpuid-cpuidex?view=vs-2019
docs.microsoft.com
https://weseetips.wordpress.com/tag/c-get-cpu-name/
weseetips.wordpress.com
https://docs.microsoft.com/en-us/windows/desktop/api/fileapi/nf-fileapi-gettemppatha
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/wininet/nf-wininet-deleteurlcacheentrya
docs.microsoft.com
https://docs.microsoft.com/en-us/previous-versions/windows/internet-explorer/ie-developer/platform-apis/ms775123(v%3Dvs.85
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/winsock2/nf-winsock2-socket
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/winuser/nf-winuser-systemparametersinfoa
docs.microsoft.com
Elsewhere on fumik0.com (5)